Sr. Security Engineer (Trellix)

Eliassen Group; Washington (District of Columbia); On-site; USD 140,000 - 170,000; Full time

Job summary

On-site in Washington, DC, Eliassen Group is seeking a Sr. Security Engineer (Trellix) to serve as the technical lead for the client's endpoint security and data protection ecosystem.

You will balance day-to-day operational support with strategic cybersecurity engineering initiatives while partnering with security operations, infrastructure, application teams, and leadership to strengthen the overall security posture.

Qualifications

• Active TS/SCI security clearance.
• 5+ years administering and engineering Trellix solutions in a large enterprise.
• Hands-on expertise with Trellix ePO, ENS, EDR, DLP, Drive Encryption (FRP/FRMP), TIE, DXL, Policy Auditor, Rogue System Detection, TSME, Solidcore, and FIM.
• Experience with application whitelisting, endpoint hardening, encryption, and data protection.
• Integration experience with SIEM, SOAR, threat intelligence, and identity platforms.
• Strong understanding of endpoint security architecture, threat detection, incident response, and risk management.
• Experience developing DLP policies, device control, and data exfiltration prevention.
• Experience supporting SOCs and enhancing 24x7 monitoring and response.
• Nice to have: CNSSD 504, NIST standards, automation with PowerShell/Python/REST APIs, dashboards and federal assessment support.

Responsibilities

• Lead engineering and administration of Trellix security platforms, including ePO, ENS, EDR, DLP, Drive Encryption (FRP/FRMP), TIE, DXL, Policy Auditor, Rogue System Detection, Trellix Security for Microsoft Exchange (TSME), Application and Change Control (Solidcore), and File Integrity Monitoring (FIM).
• Implement and manage application whitelisting, endpoint hardening, encryption, and data protection technologies.
• Integrate endpoint security with SIEM, SOAR, threat intelligence, and identity management solutions.
• Develop and maintain DLP policies, device control mechanisms, and data exfiltration prevention controls.
• Support SOC operations and enhance 24x7 monitoring and incident response capabilities.
• Create and maintain security engineering standards, SOPs, playbooks, and operational procedures.
• Support compliance initiatives aligned to federal cybersecurity frameworks and regulations.
• Perform analytical troubleshooting and root-cause analysis to improve platform reliability and security outcomes.

Skills

Active TS/SCI clearance

Trellix

ePO

EDR

DLP

SIEM

SOAR

Threat intelligence

Tools

Trellix ePO

Trellix ENS

Trellix EDR

Trellix DLP

Drive Encryption FRP/FRMP

Trellix TIE

Trellix DXL

Policy Auditor

Rogue System Detection

TSME

Solidcore FIM

Job description

On-site in Washington, DC

As a Sr. Security Engineer (Trellix), you will serve as the technical lead for our client's endpoint security and data protection ecosystem. You will balance day-to-day operational support with strategic cybersecurity engineering initiatives while partnering with security operations, infrastructure, application teams, and leadership to strengthen the overall security posture.

Description

As a Sr. Security Engineer (Trellix), you will serve as the technical lead for our client's endpoint security and data protection ecosystem. You will balance day-to-day operational support with strategic cybersecurity engineering initiatives while partnering with security operations, infrastructure, application teams, and leadership to strengthen the overall security posture.

Due to federal security clearance requirements, applicant must be a United States Citizen with an active Top Secret clearance. This is a full-time, permanent opportunity, offering a competitive salary and comprehensive benefits package. Qualified applicants must be willing and able to work on a w2 basis.

Salary: $140,000 - $170,000/ yr. w2

Responsibilities

• Lead engineering and administration of Trellix security platforms, including ePO, ENS, EDR, DLP, Drive Encryption (FRP/FRMP), TIE, DXL, Policy Auditor, Rogue System Detection, Trellix Security for Microsoft Exchange (TSME), Application and Change Control (Solidcore), and File Integrity Monitoring (FIM).
• Implement and manage application whitelisting, endpoint hardening, encryption, and data protection technologies.
• Integrate endpoint security with SIEM, SOAR, threat intelligence, and identity management solutions.
• Develop and maintain DLP policies, device control mechanisms, and data exfiltration prevention controls.
• Support SOC operations and enhance 24x7 monitoring and incident response capabilities.
• Create and maintain security engineering standards, SOPs, playbooks, and operational procedures.
• Support compliance initiatives aligned to federal cybersecurity frameworks and regulations.
• Perform analytical troubleshooting and root-cause analysis to improve platform reliability and security outcomes.

Experience Requirements

• Active TS/SCI security clearance.
• 5+ years administering and engineering Trellix solutions in a large enterprise.
• Hands-on expertise with Trellix ePO, ENS, EDR, DLP, Drive Encryption (FRP/FRMP), TIE, DXL, Policy Auditor, Rogue System Detection, TSME, Solidcore, and FIM.
• Experience with application whitelisting, endpoint hardening, encryption, and data protection.
• Integration experience with SIEM, SOAR, threat intelligence, and identity platforms.
• Strong understanding of endpoint security architecture, threat detection, incident response, and risk management.
• Experience developing DLP policies, device control, and data exfiltration prevention.
• Experience supporting SOCs and enhancing 24x7 monitoring and response.Ability to develop standards, SOPs, playbooks, and operational procedures.
• Experience supporting compliance initiatives aligned with federal frameworks; strong analytical and troubleshooting skills.
• Nice to Haves: Insider Risk, Data Protection, or UAM program support; knowledge of CNSSD 504, NIST 800-53, NIST 800-207, and NIST CSF; automation with PowerShell, Python, and REST APIs; integrating Trellix telemetry with SIEM and SOAR; executive dashboards and metrics; FIM implementation for compliance and forensics; JCIP, FISMA, or federal assessment support; familiarity with threat-informed defense and automation frameworks; relevant Trellix, cybersecurity, or cloud certifications.